Behavioral task
behavioral1
Sample
0cc60070c0ee4e41963878717a23f637.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0cc60070c0ee4e41963878717a23f637.exe
Resource
win10v2004-20231215-en
General
-
Target
0cc60070c0ee4e41963878717a23f637
-
Size
11.0MB
-
MD5
0cc60070c0ee4e41963878717a23f637
-
SHA1
17db04a4eb52cda5f4d3aa5a1d5ad3da006eacf9
-
SHA256
e4ca341e83fb4b42b63d5152729bf58a41a409642f2ad5813a64aa67598116e9
-
SHA512
ce47834cc5a3f78aba2328d931fbd9fec003043bf91e8a4572b26c87f0ce97de8c19ceb91b181ba57d704936b348af48405827344125ae365df1bfa8747f2240
-
SSDEEP
98304:pwCnpBMlglwWiV35mCckFR+vicS43q021g9OZuzH5q435mCckFR+vicS43:WaHTsv33FR+6cy02e9ZzH5533FR+6c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cc60070c0ee4e41963878717a23f637
Files
-
0cc60070c0ee4e41963878717a23f637.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE